Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/73a04b4b04a6b835480d36b88225a1896856cf34.roa
File:                     73a04b4b04a6b835480d36b88225a1896856cf34.roa (raw, json)
Hash identifier:          VLuEtmuZz7JjpUi47+HoeEeOHpuj/1rfWdqVue2zGdI=
Subject key identifier:   BA:4B:53:49:33:D2:4C:38:C8:B2:D2:4A:13:57:5C:86:06:8C:2B:EC
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       0D8D79
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/73a04b4b04a6b835480d36b88225a1896856cf34.roa
Signing time:             Wed 24 Mar 2021 14:33:05 +0000
ROA not before:           Wed 24 Mar 2021 14:33:05 +0000
ROA not after:            Tue 24 Mar 2026 14:33:05 +0000
asID:                     262239
IP address blocks:        186.65.88.0/22 maxlen: 24
                          2803:9a00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888185 (0xd8d79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Mar 24 14:33:05 2021 GMT
            Not After : Mar 24 14:33:05 2026 GMT
        Subject: CN=73a04b4b04a6b835480d36b88225a1896856cf34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fb:0a:4a:1c:3b:2d:05:32:63:68:44:43:68:
                    2f:d5:46:94:4f:e7:42:7d:03:aa:31:bd:c3:1f:3b:
                    50:8c:83:19:b1:70:b2:e3:cb:89:39:44:1b:65:97:
                    5f:fd:6b:45:a4:dc:4a:a2:66:a8:72:e1:a9:ad:82:
                    fd:6c:97:e7:c9:91:d1:1f:df:50:b7:5e:95:e3:97:
                    fc:9c:46:22:a6:bf:d0:81:82:be:f4:74:e7:54:40:
                    97:99:08:50:b6:e5:b7:42:7c:b5:e7:93:1e:b7:b0:
                    36:a5:42:44:12:68:22:41:b9:04:52:97:34:1a:a6:
                    0c:0b:77:be:fd:19:0a:d9:9a:c9:32:f3:28:95:31:
                    10:c2:3d:ed:db:83:7d:f2:e7:1c:d2:26:96:08:34:
                    cf:be:0e:63:60:39:bb:b5:4f:35:9f:71:c8:53:84:
                    36:48:b4:a3:0c:6e:52:f2:73:29:7a:1b:2e:e2:9d:
                    3d:c2:88:30:59:0c:fe:05:ae:f9:a4:e8:e0:7e:1d:
                    fc:fd:92:73:0b:fa:5b:ab:29:67:03:18:b3:cb:e3:
                    f8:d6:30:c0:fd:51:65:b8:a2:b5:1c:09:5a:2f:8b:
                    95:ec:0d:a9:39:44:c3:19:d1:16:13:0e:cd:5e:66:
                    5d:fa:d3:cc:12:ea:ba:07:92:8c:78:08:3d:3c:b1:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:53:49:33:D2:4C:38:C8:B2:D2:4A:13:57:5C:86:06:8C:2B:EC
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/73a04b4b04a6b835480d36b88225a1896856cf34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.88.0/22
                IPv6:
                  2803:9a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:c3:bf:24:43:09:67:2a:c0:6c:19:8d:0e:bb:ec:74:74:a1:
         d0:71:3b:d0:92:34:23:21:f0:38:4e:25:dc:3b:4f:02:25:06:
         cb:13:fb:ba:04:3d:08:61:ab:02:3e:25:21:7d:1b:65:ff:dd:
         cb:8a:0a:8d:1a:54:3f:9a:b1:86:c1:53:07:14:39:9a:a5:db:
         f0:4b:45:0e:ad:34:b6:ba:0d:dd:8f:33:fc:c3:0c:3b:5e:4d:
         db:eb:39:be:29:60:30:7e:19:c4:04:21:14:4a:cf:40:c6:62:
         5d:99:2f:48:fa:1a:34:15:65:cb:80:63:0f:38:92:c2:b4:56:
         2b:77:73:27:88:03:34:86:0f:65:80:ec:15:f7:83:e6:78:e9:
         46:f1:2c:c3:a9:99:2f:4d:49:75:42:cd:88:c9:d8:e2:ed:8d:
         6f:28:a0:56:ea:a0:c3:5f:c2:26:a9:03:9e:86:c7:ba:d1:5f:
         03:01:95:e2:68:c7:35:94:6a:1b:37:c5:11:ac:41:3d:ad:fc:
         9b:0e:2e:8c:fb:ec:d5:c5:0d:33:08:86:80:f7:8c:ad:86:3c:
         40:d6:8e:9b:87:8a:89:7f:3b:16:a8:58:5e:a6:e0:f5:d8:93:
         65:85:da:7d:52:84:25:12:11:09:e3:ee:fe:c2:d2:c2:dd:31:
         f6:5e:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----